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CONFIDENTIAL 


We firmly agree with the opening paragraphs of the DRAFT 
NSDD. We at CIA are particularly concerned about the. security 
of Automated Information Systems and as many of you are aware 
Ruth Davis is conducting work for the Intelligence Community 
in this field. 

We share the belief that the fields of Telecommunications 
and Automated Information Systems are coming eogether: However 
the field of Telecommunications Security is mature. The field 
of Automated Information Systems Security is by contrast in 
its infancy. 

We would prefer to see the topic of Telecommunications 
Security and Automated Information Systems Security dealt with 
in two distinct but related NSDDs. However we can live with a 
well-structured single NSDD. 

Having said this, our serious concerns with the DRAFT NSDD 
are that it brings two areas together too abruptly, creates one 
National Manager for both and then proceeds to centralize 
procurement, programming and budgeting. These proposed steps, 
we believe, do not adequately recognize the DCI's statutory 
responsibilities and authorities. The DRAFT NSDD can be 
interpreted as diluting the DCI's responsibilities regarding 
formulation of the NFIP and impact on Intelligence Community 


priorities. The DRAFT implies that the National Manager will 
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have full responsibility for assessing and disseminating hostile 
threat information which can be interpreted as reducing the 
analytical missions of CIA and other organizations. And, the 
DRAFT implies that the DCI shall "coordinate" unique requirements 
pertaining to the protection of Intelligence Sources and Methods 
with the National Manager and others. This latter step May tend 
to breakdown compartmentation with respect to Intelligence 
Sources and Methods which the DCI is charged with maintaining. 
We believe the DRAFT NSDD is a good starting point and 
will work to reach a consensus on a new NSDD or two. But we 
believe that a new NSDD, or two, would be more easily digested 
and implemented if they were evolutionary in tone bringing 
together the fields of Telecommunications Security and Automated 


Information Systems Security in the course of the next few years. 
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